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We generalize the notion of symmetries of propositional formulas in conjunctive normal form to 
modal formulas. Our framework uses the coinductive models introduced in [4] and, hence, the results 
apply to a wide class of modal logics including, for example, hybrid logics. Our main result shows 
that the symmetries of a modal formula preserve entailment: if a is a symmetry of <p then <p |= y/ if 
and only if <p \= a (yr). 

1 Symmetries in Automated Theorem Proving 

Many concrete, real life problems present symmetries. For instance, if we want to know whether trying 
to place three pigeons in two pigeonholes results in two occupying the same nest, it does not really matter 
which of all pigeons gets in each pigeonhole. Starting by putting the first pigeon to the first pigeonhole 
is the same as if we put the second one in it. In mathematical and common-sense reasoning these kinds 
of symmetries are often used to reduce the difficulty of reasoning — one can analyze in detail only one 
of the symmetric cases and generalize the result to the others. The exact same is done in propositional 
theorem proving. Many problem classes and, in particular, those arising from real world applications, 
display a large number of symmetries; and current SAT solvers take into account these symmetries to 
avoid exploring duplicate branches of the search space. In the last years there has been extensive research 
in this area, focusing on how to define symmetries, how to detect them efficiently, and how SAT solvers 
can better profit from them |[27ll . 

Informally, we can define a symmetry of a discrete object as a permutation of its components that 
leaves the object, or some aspect of it, intact (think of the rotations of a spatial solid). In the context 
of SAT solving we can formally define a symmetry as a permutation of the variables (or literals) of a 
problem that preserves its structure and, in particular, its set of solutions. Depending on which aspect 
of the problem is kept invariant, symmetries are classified in the literature into semantic or syntactic S- 
Semantic symmetries are intrinsic properties of a Boolean function that are independent of any particu- 
lar representation, i.e., a permutation of variables that does not change the value of the function under 
any variable assignment. Syntactic symmetries, on the other hand, correspond to the specific algebraic 
representation of the function, i.e., a permutation of variables or literals that does not change the repre- 
sentation. A syntactic symmetry is also a semantic symmetry, but the converse does not always hold. 

In ||23 J. Krishnamurthy used symmetries in the context of SAT solving. In this article, the notions of 
global and local symmetries as inference rules are used to strengthen resolution-based proof systems for 
propositional logic, showing that they can shorten the proofs of certain difficult propositional problems 
like the pigeonhole principle. Since then, many articles discuss how to detect and exploit symmetries. 
Most of them can be grouped into two different approaches: static symmetry breaking and dynamic 
symmetry breaking. In the first approach lll4llT5l lTll. symmetries are detected and eliminated from the 
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problem statement before the SAT solver is used. They work as a preprocessing step. In contrast, dy- 
namic symmetry breaking |[T3l l9l[T0ll detects and breaks symmetries during the search space exploration. 
The first approach can be used with any theorem prover; the second is prover dependent but it can take ad- 
vantage of symmetries that emerge during search. Despite their differences they share the same goal: to 
identify symmetric branches of the search space and guide the SAT solver away from symmetric branches 
already explored. A third alternative was introduced in flHJ , which combines symmetry reasoning with 
clause learning [28 ] in Conflict-Driven Clause Learning SAT solvers ifTHl . The idea is to augment clause 
learning by using the symmetries of the problem to learn the symmetric equivalents of conflict-induced 
clauses. This approach is particularly appealing as it does not imply major modifications to the search 
procedure and the required modifications to the clause learning process are minor. 

Symmetries have been extensively investigated and successfully exploited for propositional logic 
SAT and some results involve other logics, see (6l |7J El . To the best of our knowledge, symmetries 
remain largely unexplored in automated theorem proving for modal logics. 

In this paper, we generalize the notion of symmetries to modal formulas in conjunctive normal form 
for different modal logics including the basic modal language over different model classes (e.g., reflex- 
ive, linear or transitive models), and logics with additional modal operators (e.g., universal and hybrid 
operators). The main result of the article shows that symmetries of a modal formula preserve entailment: 
if a is a symmetry of (p then (p |= y if and only if q> \= cr(y/)- In cases where the modal language has 
a tree model property, we can actually use a more flexible notion of symmetry that enables different 
permutations to be applied at each modal depth. We also present a method to detect the symmetries 
of modal formulas in conjunctive normal form. This method reduces the symmetry detection problem 
to the graph automorphism problem. A general graph construction algorithm, suitable for many modal 
logics, is presented. In order to tackle a broad range of modal languages that may or may not enjoy the 
tree model property, we use in our work the semantics provided by coinductive modal models [4] instead 
of the more familiar Kripke relational semantics. Coinductive modal models provide a homogeneous 
framework to investigate different modal languages at a greater level of abstraction. A consequence 
of this is that results obtained in the coinductive framework can be easily extended to concrete modal 
languages by just giving the appropriate definition of the model classes and fixing some parameters. 

In Section [2] we present modal logics and coinductive modal models. In Section [3] we define modal 
symmetries, together with the appropriate notion of simulation to show that symmetries preserve modal 
entailment. In Section [4] we introduce layered permutations and show that they can be used when the 
modal logic has the adequate notion of the tree model property. In Section [5] we present a graph con- 
struction algorithm to detect symmetries in modal formulas and prove its correctness. We draw our 
conclusions and discuss future research in Section [6] 

2 Modal Logics and Coinductive Models 

In what follows, we will assume basic knowledge of classical modal logics and refer the reader to |[TT1[T2I 
for technical details. The coinductive framework for modal logics was introduced in J4) to investigate 
normal forms for a wide number of modal logics. Its main characteristic is that it allows the representa- 
tion of different modal logics in a homogeneous form. For a start, the set of formulas is as for the basic 
(multi) modal logic. 

Definition 1 (Modal formula). A modal signature is a pair (Atom, Mod) where Atom and Mod are two 

countable, disjoint sets. We usually assume that Atom is infinite. The set of modal formulas over (Atom, 
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Mod) is defined as 

<p ::= a | -><p \ <p V<p | [m](p, 

for a G Atom, m G Mod. T and _L stand for an arbitrary tautology and contradiction, respectively. 
Connectives such as A, — > and (m), are defined as usual. 

We will define a symmetry as a permutation of literals that preserve the structure of formulas in 
conjunctive normal form (CNF). 

Definition 2 (Literals and modal CNF). A literal / is either an atom a or its negation -<a. The set of 
literals over Atom is ALit= AtomU {-<a | a G Atom}. 

A modal formula is in modal conjunctive normal form (modal CNF) if it is a conjunction of modal 
CNF clauses. A modal CNF clause is a disjunction of atoms and modal literals. A modal literal is 
a formula of the form [m]C or ->[m]C where C is a modal CNF clause. Every modal formula can be 
transformed into an equisatisfiable formula in modal CNF in polynomial time (see /@ 12617 for details). 

A formula in modal CNF can be represented as a set of modal CNF clauses (interpreted conjunc- 
tively), and each clause can be represented as a set of atom and modal literals (interpreted disjunctively). 
With the set representation we can disregard the order and multiplicity in which clauses and literals ap- 
pear. This will be important when we define symmetries below. In the rest of the paper we will assume 
that modal formulas are in modal CNF, and we will refer to them as modal CNF formulas. 

Example 1. The modal formula (p = (m)(p AqAp) A [m]^r is equisatisfiable to the modal CNF formula 
(p' = {Hm]{^q}},{[m}{^}}}. 

Up to now, we have not departed from the standard presentation of classical modal logic in important 
ways. The main change introduced by the coinductive approach is with the definition of model and 
semantic conditions. 

Definition 3 (Models). Let 5? = (Atom, Mod) be a modal signature and W be a fixed, non-empty set. 
Modsiv, the class of all models with domain W, for the signature Sf, is the class of all tuples {w, W, V,R) 
such that w G W, V (v) C Atom for all vGff, and 

R(m,v) C Modsw for m G Mod and v £W. 

Given a model ^ = (w, W, V, R) we will say that w is the point of evaluation and denote it as w , 
W is the domain and denote it as V is the modal valuation and denote it as V'^ , and R is the 

accessibility relation and denote it as R fi . Mods denotes the class of all models over all domains, 
Mods = Uw Modsw. 

Given ^ G Modsw, let Ext(^#), the extension of jtft, be the smallest subset o/Modsw that contains 
and is such that if ' jV G Ext(^#), then R^ (m,v) C Ext(^#) for all m G Mod, v G W. 

The definition of a coinductive modal model is similar to the usual definition of a Kripke pointed 
model. The difference lies in the way the accessibility relation is defined. In particular, for each m and 
each state w, R(m,w) is defined as the set of (potentially different) models accessible from w through 
the m modality. Observe that for each W, Mods^ is well-defined (coinductively), and so does Mods, 
the class of all models. Our results will apply not only to Mods but to many of its subclasses. We will 
be interested in classes which are closed under accessibility relations (closed classes for short): ^# G ^ 
implies Ext(^#) C % '. In the rest of the paper we will only consider classes of models closed under 
accessibility relations. 
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(a) (b) 
Figure 1 : a) A Kripke model, b) Equivalent coinductive model. 

Example 2. Consider the pointed Kripke model in Figure^i, and its equivalent coinductive modal model 
in Figure^Fp. The point of evaluation in each model is circled. The main difference is that the relation of 
a coinductive model leads to another coinductive model, whereas in a Kripke model the relation leads to 
another point of the same model. 

We are now ready to introduce the definition of the satisfiability relation |=. 

Definition 4 (Semantics). Let q> be a formula in modal CNF and ^# = (w,W,V,R) a model in Mods. 
We define \=for modal CNF formulas, clauses and literals as 





iff 


for all clauses C G <p we have ^# = C 


he 


iff 


there is some literal I G C such that ^# = / 


\= a 


iff 


a G V(w) for a G Atom 




iff 


a V(w) for a G Atom 


|= [m]C 


iff 


J?' = C, for all Jl' G R(m, w) 




iff 


JZ y= He. 



For ^ a class of models, we write c € |= (p whenever j$ |= <p for every in and we say that 
rV = {9 I ^ 1= < P} ™ ^e logic defined by c €. 

The set of models in ^ of a formula (p is the set Mod^((p) = | ^# G c € and ^ |= <p} (when ^ is 
clear from the context we will just write Mod((p)). We say that y can be inferred from <p in c € and write 
q> \=cg y if Modtf(q>) C Mod^(\j/)- 

As shown in O, the logic TmoiIs (generated by the class of all possible models) coincides with the 
basic multi-modal logic K. By properly restricting the model class we can capture different modal logics. 
Let us call a predicate P on models a defining condition for a class ^ whenever ^ is such that ^# G 
if and only if holds. Consider the signature 5? = (Atom, Mod) where Atom = PropU Nom, 

Mod = RelU{A}U{@ ; | i G Nom}; and Prop = {p u p 2 ,...}, Nom = {n u n 2 ,...} and Rel = {n,r 2 ,...} 
are mutually disjoint, countable infinite sets. In what follows, we will usually be interested in sub- 
languages of the language defined over 5? by Definition [T] 



Class 


Defining condition 


®m 




=4> R M (m,w) 


<Z{(v,\JK\,V M ,R M ) |vG |uf|} 


m G Rel 






(A, >v) 


= {(v,\J(\,V M ,R M ) |vG 








^R^(@i,w) 


= {(v,\^\,V-",R")\ieV(v)} 


i G Nom 






{w | i G V- 4 


( (w)} is a singleton, V/ G Nom 





Figure 2: Defining conditions for different modal logics 



Figure[2]introduces a number of closed model classes by means of their defining conditions. Observe 
that 3?^ is true for a model ^ if every successor of w is identical to ^# except perhaps on its point 
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of evaluation. We call m a relational modality when it is interpreted in because over this class they 
behave as classical relational modalities J31 . 

We can capture different modal operators, like the ones from hybrid logics [fjD, by choosing the proper 
class of models. Predicates <^a and &@,, for instance, impose conditions on the point of evaluation of 
the accessible models restricting the evaluation to the class of models where the relation is, respectively, 
the total relation (\/xy.R(x,y)) and the 'point to all V relation (\/xy.R(x,y) o i(y)). Observe that whenever 
the atom i is interpreted as a singleton set, the 'point to all V relation becomes the usual 'point to V 
relation (\/xy.R(x,y) = i) of hybrid logics. Finally, predicate ^M om turns elements of Nom into 
nominals, i.e., true at a unique element of the domain of the model. 

An interesting feature of this setting is that we can express the combination of modalities as the 
intersection of their respective classes. For example, ^jg>f@y the class of models for the hybrid logic 
Jf?(@), can be defined as follows: 

= ®Nom H c €@ n ^R e |, where 

^@ = rifeNom ^@;> an( l ^Rel = HmeRel ■ 

The crucial characteristic of the coinductive approach is that all these different modal operators are 
captured using the same semantic condition introduced in Definition |4] All the details defining each 
particular operator are now introduced as properties of the accessibility relation. As a result, a unique 
notion of bisimulation is sufficient to cover all of them. 

Definition 5 (Bisimulations). Given two models ^ and we say that <Jt and are bisimilar (nota- 
tion ^±±^') if ^£ Z^ 1 for some relation Z C Ext(..#) x Ext(-#') such that whenever (w,W,V,R) Z 
(w', W', V',R') we have the following properties: 

• Harmony: a G V(w) iff a G V (w'), for all a G Atom. 

• Zig: Jf G R(m,w) implies J/ Z Jy" for some jV' G R'(m,w'). 

• Zag:,jV' £ R'(m,w') implies JV Z-jV' for some jV G R(m,w). 
Such Z is called a bisimulation between and 

The classic result of invariance of modal formulas under bisimulation ifTTl can easily be proved. 

Theorem 1. If ' Jt ±±^' ', then |= q> iff J?' \= (p.for all (p. 

As stated in [4], this general notion of bisimulation works for every modal logic definable as a closed 
subclass of Mods. 

3 Modal Symmetries 

We will show that consistent symmetries for modal formulas behave similarly as in the propositional 
case and, hence, could assist in modal theorem proving. Let us start by introducing the basic notions. 

Definition 6 (Complete, Consistent and Generated sets of literals). A set of literals L is complete if for 
each a G Atom either a G L or — 1<3 G L. It is consistent if for each a G Atom either a L or -ia G" L. 
Any complete and consistent set of literals L defines a unique valuation v C Atom as a G v if a G L and 
a G" v if -ia G L. For S C Atom, the consistent and complete set of literals generated by S (notation L$) is 
5U{-.a | a G Atom\S}. 

Definition 7 (Permutation). A permutation is a bijective function a : ALit^ ALit. For La set of literals, 
o(L) = {o{l) |ZGL}. 
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In this work, we only deal with permutations defined over finite sets of literals, namely, those oc- 
curring in the formula q> under consideration. This restricts us to finite groups of symmetries [ 19 ]. This 
kind of permutations can be succinctly defined using cyclic notation, e.g., a = (p -<q)(-<p q) is the per- 
mutation that makes o~(p) = ->q, o{-^q) = p, o(-<p) = q and o(q) = ->p and leaves unchanged all other 
literals; a = (p qr)(->p ->q ->r) is the permutation o(p) =q,c(q) = r and o~(r)= p and similarly for the 
negations. Finally, for «£Z>i and a a permutation, we denote the composition of a with itself n times 
by a". a denote the identity permutation, a 1 the inverse of a, and G~", for n G Z<i is the «-times 
composition of a -1 with itself. 

Because, in our language, atoms may occur in some modalities (like @,) we should take some care 
when we apply permutations to modal formulas. We will say that a modality is indexed by atoms if its 
definition depends on the value of an atom. If m is indexed by an atom a we will sometimes write m{a). 

Definition 8. [Permutation of a formula] Let (p be a modal CNF formula and o a permutation. We 
define 0~{(p) recursively: 

CT (<P) = {^(C) I C € «p} for (p a modal CNF formula 
a(C) = {a(A) | A £ C} for C a modal CNF clause 
o{[m]C) = [o{m)]o{C) 
a(-\m]C) = -^[a(m)]a(C) 

where a(m) = a(m(a)) = m(a(a)) if m is indexed by a, and o{m) = m otherwise. 

Definition 9. A permutation a is consistent if for every literal I, <r( -1 /) = —>o(l). A permutation a is a 
symmetry for (p if (p = c{(p), when conjunctions and disjunctions in <p are represented as sets. 

Example 3. Trivially, the identity permutation a (I) =1 is a consistent symmetry of any formula (p. More 
interestingly, consider (p = {{~<p,r}, {q,r}, {r, [m]{—<p, q}}}, then the permutation o = (p _1 <7)( _1 P q) 
is a consistent symmetry of (p. 

Now, since a permutation over literals can be lifted to transform some formula cp into another formula 
a(<p), we also want to consider permutations applied to models. Indeed, if (p is true in some we 
intuitively want <r(<p) to be true in some model obtained from lifting a to ^ . Thus the next step is to 
define the notion of applying permutations to models. 

Definition 10 (Permutation of a model). Let a be a permutation and ^ = (w,W,V,R) a model. Then 
c(JC) = (w,W,V',R'), where, 

V'(v) = <j(L v r v \)r\Atom for all v £W, and, 
R'(m,v) = {o{jV) \ JY G R(o(m),v)} for all m £ Mod and v eW. 

ForM a set of models, o(M) = {o{J£) \ J{ £ M}. 

The main ingredient to prove that symmetries preserve entailment is the relation between models that 
we call a-simulation. 

Definition 11 (a-simulation). Let a be a permutation. A a-simulation between models ^# = (w, W, V,R) 
and = (w' ,W ,V' ,R') is a non-empty relation Z C Ext(^#) x Ext(^#') that satisfies the following 
conditions: 

• Root: JtZJt'. 

• Harmony: I £ L V ( W ) iff 'a (I) £L v ,^y 
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• Zig: If JtZJC and Jf G R(m,w) then jYZjV' 'for some Jf' G R'(o(m),w'). 

• Zag: IfJtZJt' and .jY 1 G R'(m,w') then ,jYZ,jV' for some jY G R(c~ x (m),w). 

We say that two models j$ and are G -similar {notation ^_ a ^') if there is a O -simulation Z 
between them. 

Notice that while ^^ a ^' implies ^ rta-i ^> the relation ^ a is not symmetric (in particular 
a might differ from a -1 ). From the definition of a-simulations it intuitively follows that while they do 
not preserve validity of modal formulas (as is the case with bisimulations) they do preserve validity of 
permutations of formulas. 

Proposition 1. Let o be a consistent permutation, (p a modal CNF formula and *M = (w,W,V,R), 
Jt' = (w' ,W ,V ,R') models such that J( ^Jt' . Then \= (p iff JY' |= a((p). 

Proof. The proof is by induction on (p. Base Case: Suppose (p = a then, |= a iff a G V(w) iff a G L v i w \ 
iff, by definition of a-simulation, a (a) G iff \= o(a). 

Suppose cp = -<a then, j$ |= -<a iff a g" V(w) iff -<a G L v r w \ iff, by definition of a-simulation, 
a(-ia) = -ia(a) G Lyi w ') iff o(a) V'(w') iff Jt' |= ~^o(a). 

When cp = C, with C a clause or a conjunction of clauses, the proof follows by induction directly. 

Inductive Step: Suppose (p = [m]\jf. Then Jt |= [m]\jf iff JV |= ^ for all ^ G 7?(m,w). Given 
that Jl^_ a Jt' ', by Zig we know that for all Jf exist jY' such that .A'^.jV' and G R'(o(m), w'). 
Then, by inductive hypothesis, Jf' |= a(y/) for all o/K' G /?'(a(m),w / ) iff |= [a (m)]a . Then, by 
Definition[8j |= a([m]y/"). The converse uses Zag and the inductive hypothesis. 

Suppose cp = Then ^# |= — > [m] y/" iff there exists jV G R(m,w) such that, <yf |= Given 

that J{ ^_ a Jt', by Zig we know that for all JV exist JY' such that JY -^JY' and JY' G R'(o(m), w'). 
Then, by inductive hypothesis, e/f' |= <j(^y) = ^<j(y) iff M' \= -i[a(m)]a(y/). Then, by Definition[8j 

|= a(-i[m]i//). The converse follows using Zag and the inductive hypothesis. □ 



An easily verifiable consequence of Definitions 10 and 1 1 is that j$ and o{^) are always a-similar. 



Proposition 2. Let o be a consistent permutation and j$ = (w, W, V,R) a model. Then g(j$\ 

Proof. Let us define the relation Z = {(J/ ', a{JY)) \ JY G Ext(^)} and show that it is a c-simulation 
between jtft and a(^#). The Z/g and Zag conditions are trivial by definition of a(^#). 

For Harmony, we have to check that / G L v i w \ iff a(l) G Lyii w y From the definition of a(^#), 
L y /( V11 ) = a(Ly( w )), hence if / G L v ^ then a(Z) G a(L V ( w )). Moreover, a(Ly( M ,,)) is a complete set of 
literals because Lyi w \ is a complete set of literals and a is a consistent permutation, and hence the 
converse also follows. □ 

Interestingly, if a is a symmetry of cp then for any model ^( is a model of cp if and only if 
a(^#) is. This will be a direct corollary of the following proposition in the particular case when a is a 
symmetry and hence d(<p) = <p. 

Proposition 3. Let o be a consistent permutation, ^ a model and (p a modal CNF formula. Then 
|= cp iff c{Jt) |= a(<p). 

Proof. From Proposition |2](^ o(^)) and Proposition [I] □ 

Corollary 1. If o is a symmetry of (p then Ji G Mod((p) iff o(^) G Mod((p). 
To clarify the implications of the Corollary [T] consider the following example. 
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Example 4. Let (p = (p V q V r) A (s V q V r) A (->p V -ij) A (m) (/? V 5) A [A] (-ir). From Figure^ we can 
verify that „St\ |= <p. 

A^ow o = (p s)(-<p —>s) is a symmetry of (p. Then, by Corollary^ we have o{y^\) |= (p, which can 
be verified in the model of Figure^). 
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(a) (b) 
Figure 3: a) Model ^#1. b) Model a{j£\). 



The notion of a-simulation in coinductive modal models is general enough to be applicable to a wide 
range of modal logics. Notice though, that our definition of a-simulation makes no assumption about 
the models being in the same class. Consider, for example, a model ^ G ^jr(@) an d a permutation 
a = [i p)(-ii -<p) for i G Norm, p G Prop. By the defining condition ^jpi®), nominals in j& are true at a 
unique element in the domain, but this does not necessary hold for a and hence a(^#) might not 
be in ^#(@). Hence, when working with subclasses of Mods we will often have to require additional 
conditions to a permutation a to ensure that for every o{^) is in the intended class. 

Definition 12. Le? o be a permutation and *jf a closed class of models. We say that is closed under a 

z//or every ^ G c €, a{JT) G 

Example 5 (a-simulation in hybrid logic). Consider the class ^jr(@)- is not closed under 

arbitrary permutations, but it is closed under permutations that send nominals to nominals. 

Everything is now in place to show that modal entailment is preserved under symmetries. 

Theorem 2. Let (p and \f/ be modal formulas, let a be a consistent symmetry of <p and a class of 
models closed under a. Then <p \=<g y if and only if (p \=%- g(y). 

Proof. We first show that under the hypothesis of the theorem the following property holds 
Claim: Mod^(<p) = a(Mod^((p)). 

[D] Let jV G a(Mod^(<p)) and J{ G Mod^ (<p) be such that jY = a{JT). Then J( \= <p and by 
Corollary[T| ct(..#) |= (p. Given that is closed under a, a(J%) G ^ and, hence, a{jtf) G Mod^(<p). 

[C] Let Jt G Mod^(<p), then |= (p. By Corollary[T| a(^#) |= <p and, given that *rf is closed under a, 
a(^#) G *rf . Therefore, a(^#) G Mod^(<p). Because a is arbitrary, the results holds also for o k , k G Z. 

Because a is a permutation over a finite set, there exists n such that a" is the identity permutation. 
Now consider o n ~ l (Jt), we know c n ~ x (Jt) G Mod^(<p). Hence a n {JC) = ^# G a(Mod^(<p)). 
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Now, we have to prove that 9 \=<g 9 iff 9 \=<g (7(9). By definition, 9 \=<# 9 iff Mod^ (9) \=<g 9. 
By Proposition [5} this is the case if and only if a(Mod<,f (9)) \=*g 01(9). 

Given that a is a symmetry of 9, by the Claim above, c^Mod^ (9)) \=<g (7(9) iff Mod<^(9) \=<g 
0(9), which by definition means 9 \=<g (7(9). □ 

Theorem [2] provides an inexpensive inference mechanism that can be used in every situation where 
entailment is involved during modal automated reasoning. Indeed, applying a permutation on a formula 
is a calculation that is arguably computationally cheaper than a tableau expansion or a resolution step. 
Therefore, new formulas obtained by this mean may reduce the total running time of an inference algo- 
rithm. In the case of propositional logic, the strengthening of the learning mechanism has already shown 
its results in llHt. In the case of modal logic, it remains to see when cases of 9 |= 9 occur during a 
decision procedure, and how to better take advantage of them. 



4 Layered Permutations 

In this section we present the notion of layered permutations. First, we present a definition of the tree 
model property iTPTll for coinductive modal models that we will use. 

Given a model a (finite) path rooted at j$ is a sequence % = {^Q,m\ , ^\ , . . . , mk,^k), for m\ G 
Mod where = dt, k>0, and Mi G R(mi, W**- 1 ) for i = 1, . . .,k. For a path n = {jtf§,m\,jtf\ ,...,rrik, 
we define first(jz) = last(%) = and lengthen) = k. We denote the set of all paths rooted 
at as A coinductive tree model is a model that has a unique path to every reachable model 

(every model in Ext(^#)). Formally we can define the class of all coinductive tree models, ^Tree, with 
the following defining condition: 

C &Tree '■= PTree{-^) ^=> lost '■ II[^#] I — V Ext(^#) is bljective. 

For example, the unravelling construction (in its version for coinductive modal models) shown below 
always defines a model in 'ifrree- 

Definition 13 (Model Unravelling). Given a model ^# = (w,W,V,R), the unravelling of (notation 
3F(^)), is the rooted coinductive model 3?(^) = ((./#), II [./#], V ,R') where 

V'(ti) = V{w last W),forall7ien{^], 
R'(m,n) = {(7i',n[^],V',R')\last(n')eR(m,last(n))}, for m G Mod, 71 en[J]. 

It is easy to verify that given a model jM, its unravelling ^(^#) is a tree (=T(^#) G ^Tree) and, as 
expected, ^# and ^(^#) are bisimilar. 

In what follows, we will use trees to define a more flexible family of symmetries that we call layered 
symmetries. The following will give a sufficient condition ensuring that layered symmetries also preserve 
entailment. 

Definition 14 (Tree model closure property). We say that a class ^ of models is closed under trees if for 
every model M G there is a tree model 2? G such that ^-H- 2F. 

From this definition, it follows that a class of models closed under unravellings (£F(y$) G *rf for all 
G ff) is also closed under trees. 

Example 6. Trivially the class Mods (i.e., the basic modal logic) is closed under trees, and so does the 
class ^KAlti of models where the accessibility relation is a partial function. Many classes like 
and ^NomfaH to be closed under trees. 
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Logics defined over classes closed under trees have an interesting property: there is a direct correla- 
tion between the syntactical modal depth of the formula and the depth in a tree model satisfying it. In 
tree models, a notion of layer is induced by the depth (distance from the root) of the nodes in the model. 
Similarly, in modal formulas, a notion of layer is induced by the nesting of the modal operators. A 
consequence of this correspondence is that literals occurring at different formula layers are semantically 
independent of each other (see [3] for further discussion), i.e., at different layers the same literal can be 
assigned a different value. 

Example 7. Consider the formula (p = (p V q) A (r V -O (-7? V <y V CHr) ) and a tree model of (p. 
Figure^shows the layers induced by the modal depth of the formula and the corresponding depth in ^M. 



Formula f 



modal depth = ® ^/ N. 

V V 
/ \ / \ 

v qr -,□ 

modal depth = 1 j 

T <1 □ 
modal depth" = 2 |~ 



Model M 



depth = 



depth = 1 



depth = 2 



p -.= true Layer 1 



p := true Layer 2 



9 r :— true 



Layer 3 



Figure 4: Induced layering on a model and a formula. 



The independence between literals at different layers enables us to give a more flexible notion of a 
permutation that we will call layered permutation. Key to the notion of layered permutation is that of a 
permutation sequence. 

Definition 15 (Permutation Sequence). We define a finite permutation sequence a as either a = (} ( i.e., 6 
is the empty sequence) or o = O : O2 with a a permutation and 02 a permutation sequence. Alternatively 
we can use the notation 6 = ((7i,..., o n ) instead of a = G\: . . .:(7„:(). 

Let |a| =nbe the length of 6 (() has length 0). For 1 < i < n, we write Ojfor the subsequence that 
starts from the i element of O. For i > n, we define 0\ = {}. In particular a = dj. Given a permutation 
sequence 0\ : 02 we define head{0\ : 62) = G\ and head(Q) = Old, where Ou is the identity permutation. 
We say that a permutation sequence is consistent if all of its permutations are consistent. 

Applying a permutation sequence to a modal CNF formula can be defined as follows: 

Definition 16 (Layered permutation of a formula). Let cp be a modal CNF formula and d a permutation 
sequence. We define o{(p) recursively: 

0(9) = 9 

(ai:d 2 )(Z) = (7i (/) forleALit 

(en : o 2 )([m]C) = [o-i(m)] 02(C) 

d(C) = {d(A) I A € C} for C a clause or a formula. 
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Notice that layered permutations are well defined even if the modal depth of the formula is greater 
than the size of the permutation sequence. Layered permutations let us use a different permutation at 
each modal depth. This enables symmetries (layered symmetries) to be found, that would not be found 
otherwise. 

Example 8. Consider the formula (p = (p V [m](p V —>r)) A (—>q V [m](^p V r)). If we only consider 
non-layered symmetries then (p has none. However, the permutation sequence {01,02) generated by 
°i = (p an d °2 = (p ~"") is a layered symmetry of (p. 

As we can see from the previous example, layered permutations let us map the same literal to different 
targets at each different modal depth. This additional degree of freedom can result in new symmetries 
for a given formula. 

From now on we can mostly repeat the work we did in the previous section to arrive to a result similar 
to Theorem|2]but involving permutation sequences, with one caveat: the obvious extension of the notion 
of permutated model a(^#) to layered permutations is ill defined if ^# is not a tree. Hence, we need the 
additional requirement that the class of models is closed under trees for the result to go through. 

Definition 17 (Layered Permutation of a model). Let o be a permutation sequence and J% = (w, W, V,R) 
a tree model. Then c(y%) = (w,W,V' ,R'), where, 

V'(v) = head(o)(L V f v \)nAtom for all v G W ', and, 
R'(m,v) = {o 2 {jV) I j¥ G R(head(o)(m),v)} for all m £ Mod and v eW. 

ForMa set of tree models, o(M) = {o(^C) \ Jl G M}. 

We can now extend the notion of a-simulation to permutation sequences. 

Definition 18 (a-simulation). Let o be a permutation sequence. A a-simulation between models = 
(w,W,V,R) and = (W ,W' ,V' ,R / ) is a family of relations C Ext(^#) x Ext(^#'), 1 < i, that 
satisfies the following conditions: 

• Root: MZs^' . 

• Harmony: IfwZ^w' then I G L v / W \ iff head (Oi) (I) G L v ^ w iy 

• Zig: If JtZ Si Jt' and JV G R(m,w) then jVZa i+1 ^V' for some jV' G R' (head(Oi)(m) ,w'). 

• Zag: If^Zg^' and J/' G R'(m,w') then JfZ 6j+i ^' for some Jf G R{head{di)~ x (m) ,w). 

We say that two models ^# and are o -similar (notation '^ s ^'), if there is a 6 -simulation 
between them. 

An important remark about the previous definition is that it does not make any assumption about the 
size of the permutation sequence. In fact, it is well defined even if the permutation sequence at hand is 
the empty sequence. In that case, it just behave as the identity permutation at each layer, thus the relation 
defines a bisimulation between the models. 

Given a closed class of tree models ^ and a a permutation sequence, we say that ^ is closed under 
o if for every ^# G ^, a(^#) G % '. 

Now we are ready to prove the main result concerning layered symmetries and entailment. 

Theorem 3. Let <p and \ff be modal formulas and let 6 be a consistent permutation sequence, and let ^ 
be a class of models closed under trees and 'lo^'^Tree closed under O.Ifo is a symmetry of (p then for 
any \j/ we have that (p \=<g \j/ if and only if (p \=<g 6(\jf). 
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Proof. We first show that under the hypothesis of the theorem the following two properties hold. 
Claim 1: Mod^ rree (<p) = d(Mod w ^((p)). 

The argument is the same as for the Claim in Theorem[2]but using permutation sequences. 

Claim 2: Mod* (?) \= v (p iff Mo6^ Tree {<p) \=? (p. 

The left-to-right direction is trivial by the fact that Mod^n^^ip) C Mod^ (<p). For the other di- 
rection, assume Mod^ n ^ Tree ((p) \=<g (p and Mod<^(<p) ty=<g (p. Then there is ^ E Mod<^(<p) such that 
M (p. But we know that , and G Mod^n^^cp). Hence 3~ \=<g (p which contradicts our 

assumption. 

It rests to prove that cp \=<g y if and only if (p \=<g cr(y/)- By definition, cp \jf if and only if 
Mod<y (<p) \=%' y. By Claim 2, this is case if and only if Mod<^n^r re( , (<P) l =c ^ ¥■ By the layered version of 
Proposition[3j this is the case if and only if ^(Mod^n^^^)) \=<g Given that a is a symmetry of 

(p, by Claim 1, a(Mod w ^ Tm ((p)) \= v 6(y) if and only if Mod^ n ^ 7rec (<P) \=v which by Claim 2 

is the case if and only if Mod^ (q>) \=cg a(\j/) which by definition means that cp \=<g □ 

5 Symmetry Detection 

Different techniques have been proposed for detecting symmetries of prepositional formulas in clausal 
form. Some of them, deal directly with the formula iTTOl . while others, reduce the problem to the problem 
of finding automorphisms in colored graphs constructed in such a way that the automorphism group of 
the graph is isomorphic to the symmetry group of the formula under consideration lTT4l IT31 ITTl . 

The availability of efficient tools to detect graph automorphisms (e.g., Il24l [T6l |2TT0 has made the 
later approach the most successful one because it is fast and easy to integrate. 

In this section we present a technique for the detection of symmetries in modal formulas that extends 
the construction proposed for propositional formulas to modal CNF formulas. We present the graph 
construction algorithm and prove its correctness. 

We now introduce some notation and definitions. In what follows, we consider modal CNF formulas 
as set of sets as defined in Section [2] and write y G cp to express that y is subformula of (p. Clauses 
occurring at modal depth are named top clauses and clauses occurring in modal literals are named 
modal clauses. Let s : Mod x {0, 1} h-> N\{0, 1} be an injective function and let t : Sub(cp) \— > N be a 
partial function defined as: 

{1 if y is a top clause 

s(m,0) ify/-=MC 
s(m, 1) if l//" = -i[m]C 

The typing function t assigns a numeric type to every clause (top or modal). For modal clauses, the type 
is based on the modality and the polarity of the modal literal in which it occurs. Let us assign to each 
clause C occurring in (p a unique identifier id{C) = (m,k,i) where m is the modal depth at which the 
clause occurs, k = t(\j/) is the type of the clause as returned by the typing function t and i G N is different 
for each clause. To simplify notation, in what follows we will assume that each clause C is labeled by its 
unique identifier id(C) = (m,k,i) and write C OT ^-. 

By definition, a symmetry of a formula cp is a bijective function that maps literals to literals. It can 
naturally be extended to a function a ext that also maps each clause C to cj(C). Notice that because a 
is a symmetry of cp both C and cj(C) are clauses in (p. Hence, both C and cj(C) will be assigned some 
identifier by the id function. 
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The following are properties of o ext that are easy to verify. 

Proposition 4. Let (pbe a modal CNF formula and O a symmetry of (p. Then for the extension of a, O ext , 
the following holds: 

\) o ext is a bijective function. 

ii) If 'Oext(C m ,k,i) = Cm',*',/' then m = m'. 

iii) If 'Oext(C m ,k,i) = Cm^k'.i' then k = k'. 

iv) If I G C m>kti then O ex ,{l) G O ex ,{C nhk ,i). 
vj o ext is a symmetry of (p. 

We can now introduce the construction of the colored graph corresponding to a given formula (p. We 
will construct an undirected colored graph with two types of edges. As coloring function we will use the 
typing function t introduced earlier in this section. 

Definition 19. Let (pbe a modal CNF formula and let At {(p) denote the set of atoms occurring in (p. The 
colored graph G((p) = {V,E\,E2) is constructed as follows: 

1. For each atom a G At((p): 

(a) Add two literal nodes of color 0: one labelled a and one labelled ~^a. 

(b) Add an edge to E\ between these two nodes to ensure Boolean consistency. 

2. For each top clause C of (p add a clause node of color t (C). 

3. For each atom literal occurring in C, add an edge to E\ from C to the corresponding literal node. 

4. For each modal literal \rn\C (—> [m]C') occurring in C: 

(a) Add a clause node of color t([m]C') (t(—i[m]C') ) to represent the modal clause C'. 

(b) Add an edge to E\ from the node ofC to this node. 

(c) If mis indexed by an atom literal I then add an edge to Ejfrom the node C' to the indexing 
literal I. 

(d) Repeat the process from point\3\for each literal (atom or modal) occurring in C'. 



This construction creates a graph with 2 + 2|Mod| colours and at most (2\V\ + #(TopClauses) + 
#(ModalClauses)) nodes. 

Example 9. Let us consider the following formula (p = (aV[m](&V-i [m]c) ) A (b V [m] (a V -i [m]c) ). This 
formula has six clauses (2 at modal depth 0, 2 at modal depth I and 2 at modal depth 2) and three 
atoms (six literals). The associated colored graph, G((p), is shown in Figure^(colors are represented 
by shapes in the figure). 



Note that the construction of Definition 19 induces a mapping g that associates to each literal and 
clause the corresponding node in the graph. 

To prove that the proposed construction is correct, we first have to show that each symmetry of the 
formula is a colored automorphism of the graph. 

Proposition 5. Let (p be a modal CNF formula, o a symmetry of (p, G((p) = (V,E\,E2) the colored 
graph of (p as defined by Definition 19 and g the mapping induced by the construction of G((p). Then 
K = go Oext is an automorphism ofG((p). 
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A = (aV[m](iV-i[m]c)) 
B = (&V[mj(flV-.[m]c)) 
C= [m](6Vn[ ffl ]c) 
D = [m](a V-i[m]c) 
Z? = [m]c 
F = [m]c 

Figure 5: Graph representation of (p. 

Proof. To simplify notation lets assume that g is the identity function (i.e., we do not differentiate be- 
tween a clause (or literal) and its associated node in the graph) and as a consequence % = o ext . Then % is 
an automorphism of G((p) if the following holds: 

1. (/,-./) EEi iff (k(1),k(^1)) eE 1 forall/G V. 
We have to consider the following cases: 

- a is a permutational symmetry: 

(—>■): Assume % = o ext = (a b)(-^a -<b). Then (71(a), 7t(-<a)) = (b,^b) G E\ by construction 

oTg(<p). 

(•<—): (a,-<a) G £i by construction of G(q>). 

- a is a phase-shift symmetry: 

(—)•): Assume n = a ext = (a ^a). Then (n(a),n(^a)) = (^a,a), but given that G((p) is an 
undirected graph (-<a,a) = (a,-<a) G £i by construction. 
(-<—): (a,-ia) G £"i by construction of G((p). 

- a is a compositional symmetry: It follows directly from the previous two cases. 

2. (l,C m .u) G E X iff (7r(/),^(C mjM )) G E x for all /,C m ,^ ; - G V. 

(—)•): By construction, (l,C m ^.i) G £i only if / G C^.;- Then, given that o ext is a symmetry and by 
Proposition flfv)[ we know that a ejc ,(/) and a exf (C m yt ,,) both occur in <p and (7 CT ,(/) G a ext (C mjk:i ). 



Then, by construction, we have that (n(l),n(C, n ,k,i)) G 
(•<—): It follows directly by construction of G((p). 

3. (C m ,k,i,C m ifl,i') G E\ iff (K(C nh k,i) ,x(C m < /)) G £i for all C m ^,i,C m >£/ G V. 

(— >): If (Cm,k,i-,C m i # v) G i?i we know that either m < m! or m > m'. Assume m < m' then 
C m \k'.i' is a modal clause occurring in C m ±j. By Proposition ^ : v) we have that o ext (C m i^',i') is 



a modal clause occurring in o ext (C m ^i), and given that a eAt is a symmetry of <p, o ext (C m ^,i) and 
Oext(C m ' jd ji) both occur in <p, therefore, by construction, 7i(C m ^j) G V and, x(C m i^'.i') G V, there- 
fore (n(C m ^j),n(C m f^j>)) EEx. 
(<—): It follows directly by construction of G(q>). 

4. (l,C m . k j) G £ 2 iff (x(l),x(C m ,u)) G £ 2 for all l,C nhLi G V. 

(—)■): (l,C m ^.i) G £2 if the modality of the modal clause C m ^j is indexed by /. Given that a ext 
is a symmetry of <p, we know that o ext (l) G <p and <Text(C m ,k,i) G 9 and that a ext (0 index the 
modality of the modal clause G ext (C m ^j), therefore, by construction, n(l) G V and 7i(C,„^,i) £ ^ 
and (n(l),7i(C m ^i)) €E 2 . 
(<— ): It follows directly by construction of G((p). 
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5. For every cycle (x y) G %, x and y have the same color. 

Follows from Proposition ^ ii) and the fact that by construction different types of clauses are 



assigned different colors in the graph. 

□ 

We now prove that any colored automorphism of G((p) induces a symmetry of (p. 
Proposition 6. Let <p be a modal CNF formula, G{(p) = (V,Ei,E2) the colored graph of <p as defined 



by Definition 19 n an automorphism of G{(p) and g the mapping induced by the construction of G{(p). 



Then o ext = g on is a symmetry of (p. 

Proof. Once more, assume g is the identity. To prove that a ext is a symmetry of <p, we have to prove the 
following properties: 

1. o ext is a consistent permutation, i.e., o ext {-^l) = -^o ext {l) for all / G ALit. 

By construction, Boolean consistency edges only connect literal nodes. Let /, G V be a literal 
node. Then by construction we have that (k,-<li) G E\. Now assume that tt(/,) = lj for lj G V. 
Given that % is an automorphism it must be the case that (7r(Z,), 7r(-iZ,)) G E\, and therefore that 
7r(-./;) = -ilj = -i7C(li), which implies that (->/,-) = ^o ex t{k)- 

2- If C„ h u G (p then a ext (C mXi ) G (p. 

By construction C m ^,i G V implies that C m ±j G (p. As n is an automorphism, 7r(C m;/ t,/) £ V, there- 
fore, 7l(C mi kj) G (p which implies that a ex t(C m ^,i) G (p. 

3. If / G <p then o ext {l) G <p. 

It follows by the same argument as in the previous case. 

4. If G e xt(C m ,k,i) = Cri.uy then k = k' . 

It follows from the fact that % is a colored automorphism, mapping only nodes of the same color, 
and that by construction, clauses of the same type are assigned the same color in the graph. 

5. If o ext (C m . k j) = C m i. k ij then m = m' . 

We prove this by induction on m, the modal depth at which a clause occurs in (p. 

Base Case: m = 0. We have to prove that if o ext {CQ^.i) = C m ',)t',i' then m' = 0. Assume that m' ^ 0. 
Then, there is a clause C nj j, with n < m' such that, C m ' # p is a modal clause occurring in it. By 
construction, we then have that (C n , s ,j,C m '^'j') £E\. As % is an automorphism of G((p), we should 
have (n(C niS j) ,7c(C m > # .,•/)) = (7i(C n ^ s j),Co,kj) £ E\, but by construction there is no such edge. 
Inductive Step: n<m ==> m. By construction of G((p) if (C m ^j,C n ,ij) G E\ then \m — n\ = 1. 
Now, assume m ^ m'. We know that there is a clause Ci m /_i\ s j such that (C( m /_j) 4 . ; -,C m ' G £i. 
Then, as 7T is an automorphism of G((p), it must be the case that {%{Ci m i_i\ s j),Tt{C m i^i^)) = 
(7r(C( m /_!) iS j),C m £.i) G E\. By the inductive hypothesis we know that 7l(C( m i_i\ s j) = Cr m i_i\ s ji 
and therefore, we have that {C( m i_\} s j>,C mi kj) G E\. But then we get that \m — [rd — 1)| > 2, which 
by construction cannot happen. Therefore (G m /_i) )S) y/,C m ^ ) j) £i, contradicting the fact that 7T is 
an automorphism of G((p). 

6. If / index a clause C m ,kj then o ext (l) index the clause o ext {C m ^f). 

If / index a clause C m ^,-, then by construction (l,C m ^j) G £2- Given that % is an automorphism, 
(n(l),n(C m ^j)) G £2, which implies that (J ext (l) index the clause o ext (C m ,kj)- 
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We have proved that o ext , the extension of a, obtained from an automorphism of the graph, is a symmetry 
of (p. To obtain the original symmetry a we just take the restriction of o ext to atom literals. □ 

Finally we can prove that our construction is correct. 
Theorem 4. Let <p be a modal CNF formula and G{(f>) = (V,Ei,E2) the colored graph constructed 



following the construction of Definition 19 Then every symmetry a of (p corresponds one-to-one to an 
automorphism % ofG((p). 

Proof. Immediate from Proposition [5] and [6j □ 

This construction enables the detection of symmetries as defined in Section [3] that is, symmetries 
defined over literals that can appear at various modal depths of a given formula. To detect layered 
symmetries (see Section [4]) for logics with the tree model closure property, the construction needs to 
be modified to capture the notion of layers. This is easy to achieve by just changing the way literals 
occurring in the formula are handled (see [25 ] for details). Properties [5] and [6] (suitably generalized) also 
hold in this case. 



6 Conclusions and Further Work 

The notion of symmetry has been well studied in propositional logic, and various optimizations of de- 
cision procedures based on it are known. In this article, we extend the notion of syntactic and semantic 
symmetries to many different modal logics using the framework of coinductive models. The main con- 
tribution is that a symmetry a preserves entailments whenever the class is closed by a. For example, 
arbitrary symmetries preserve entailments in the basic modal logic, but for the hybrid logic 3f{@) we 
can only consider symmetries that map nominals to nominals. The second contribution of the paper is to 
show that if the class of models is closed under trees, then the more flexible notion of layered symmetry 
also preserve entailments. 

To arrive at the previous results, we defined the concept of a-simulation and showed that it preserves 
a-permutation of formulas. We then presented permutation sequences a, and a-simulations. Permuta- 
tion sequences are relevant in those classes of models that are closed under trees. This property enables 
the use of layered symmetries, a notion that can capture more symmetries than the ordinary symmetry 
definition. Indeed, layered symmetries can be detected independently within atoms at each modal depth 
of a formula, a-simulations extend the notion of a-simulations to permutation sequences, and enabled 
us to prove that layered symmetries also preserve entailment. 

Finally, we presented a method to detect symmetries in modal formulas that reduces the problem to 
the graph automorphism problem. Given a formula cp, the idea is to build a graph in such a way that the 
automorphism group of the graph is isomorphic to the symmetry group of the formula that generated it. A 
general construction algorithm, suitable for many modal logics, was presented and its correctness proved. 
The presented graph construction algorithm can be extended to detect layered symmetries. Preliminary 
results on modal symmetries concerning this last construction can be found in l25l where we developed 
an efficient algorithm to detect symmetries for the basic modal logic, and empirically verified that many 
modal problems (both randomly and hand generated) contain symmetries. 

Our ongoing research focuses on the incorporation of symmetry information into a modal tableau 
calculi such as 11221 120| or modal resolution calculi such as [5]. One promising theme that we will 
investigate in the future is permutations involving also modal literals. 
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